admintoolkit.io

{
  "additionalProperties": false,
  "properties": {
    "file": {
      "description": "Certificate file content to parse, e.g. PEM text from a .crt file.",
      "type": "string"
    },
    "host": {
      "description": "TLS service host for TLSA generation, e.g. 'mail.example.com'.",
      "pattern": "^(?=.{1,253}\\.?$)[A-Za-z0-9](?:[A-Za-z0-9.-]{0,251}[A-Za-z0-9])?\\.?$",
      "type": "string"
    },
    "matching": {
      "description": "TLSA matching type: 0=full, 1=SHA-256, 2=SHA-512.",
      "enum": [
        "0",
        "1",
        "2"
      ],
      "type": "string"
    },
    "pem": {
      "description": "Certificate PEM, DER base64, or hex input, e.g. '-----BEGIN CERTIFICATE-----'.",
      "type": "string"
    },
    "port": {
      "description": "TLS service port number, e.g. '25' or '443'.",
      "pattern": "^(?:[1-9][0-9]{0,3}|[1-5][0-9]{4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5])$",
      "type": "string"
    },
    "protocol": {
      "description": "TLSA transport protocol: 'tcp' or 'udp', e.g. 'tcp'.",
      "enum": [
        "tcp",
        "udp"
      ],
      "type": "string"
    },
    "selector": {
      "description": "TLSA selector: 0=full certificate or 1=SPKI, e.g. '1'.",
      "enum": [
        "0",
        "1"
      ],
      "type": "string"
    },
    "usage": {
      "description": "TLSA certificate usage: 0=PKIX-TA, 1=PKIX-EE, 2=DANE-TA, 3=DANE-EE.",
      "enum": [
        "0",
        "1",
        "2",
        "3"
      ],
      "type": "string"
    }
  },
  "required": [
    "host"
  ],
  "type": "object"
}